(Russian) АВТОМАТИЗИРОВАННЫЙ АНАЛИЗ БЕЗОПАСНОСТИ ПРОГРАММНОГО ОБЕСПЕЧЕНИЯ ДЛЯ ОС ANDROID
E. Yu. Pavlenko1, I. A. Anoshkin1
Annotation: This paper presents methods of automated security analysis of Android applications, which can be used to search for cryptographic vulnerabilities, vulnerabilities of third-party software components, authentication, authorization, as well as to detect the storage and transmission of sensitive information in plaintext. The accuracy of search for the given types of vulnerabilities by means of automated vulnerability search and software prototype is analyzed.
Keywords: Android, vulnerability scanning, dynamic instrumentation, security standard
Pages 112–123